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Abstract. The purpose of this paper is to give a down-to-earth proof 
of the well-known fact that a randomly chosen elliptic curve over the 
rationals is most likely to have trivial torsion. 

I. Introduction 

Let us consider an elliptic curve E, defined over the rationals and written 
in short Weierstrass form 

(1) E : Y 2 = X 3 + AX + B, A, B e Z. 

We will use the standard notations for: 

• A = -16(4A 3 + 27B 2 ) ^ 0, the discriminant of E\ 

• E(Q), the finitely generated abelian group of rational points on E, 
and 

• O, the identity element of E(Q). 

Given P 6 E(Q), we will also write as customary [m]P for the point 
resulting after adding m times P. 

The problem of computing the torsion of E(Q) has been solved in a lot of 
very efficient ways [21 [3l [6] , and most computer packages (say Maple-Apecs, 
PARI/GP, Magma or Sage) calculate the torsion of curves with huge coeffi- 
cients in very few seconds. The major result which made this possible (along 
with others, like the Nagell-Lutz Theorem ([IE], [15]) or the embedding the- 
orem for good reduction primes (see, for example, [2H VIII. 7] or [121 Chap. 
5])) was Mazur's Theorem [THl HZ] who listed the fifteen possible torsion 
groups. 

In the above papers, it is proved that the possible structures of the torsion 
group of E(Q) are 

Z/nZ for n = 2, . . . , 10, 12, or Z/2Z x Z/2nZ for n = 1, . . . , 4. 

Besides, the fifteen of them actually happen as torsion subgroups of el- 
liptic curves. Notice that thanks to the above theorem, the possible prime 
orders for a torsion point defined over Q are 2, 3, 5 or 7. 

Let p be a prime number and let E[p] be the group of points of order 
p on E(Q), where Q denotes an algebraic closure of Q. The action of the 



Date: February 3, 2010. 



1 



2 



ENRIQUE GONZALEZ- JIMENEZ AND JOSE M. TORNERO 



absolute Galois group Gq = Gal(Q/Q) on E[p] defines a mod p Galois 
representation 

Pe, p : Gq -> Aut(£[p]) S GL 2 (F P ). 

Let Q(£J[p]) be the number field generated by the coordinates of the points 
of E[p\. Therefore, the Galois extension Q{E[p])/Q has Galois group 

Gal(Q(£[p])/Q) 9i PEtP (G Q ). 

The prime p is called exceptional for E if pE )P is not surjective. If E has 
complex multiplication then any odd prime number is excepcional. On the 
other hand, if E does not have complex multiplication then Serre (20] proved 
that E has only finitely many exceptional primes. 

Duke [1] proved that almost all elliptic curves over Q have no exceptional 
primes. More precisely, given an elliptic curve E in a short Weierstrass form 
as in (jTJ, the height of the elliptic curve is defined as 

H(E) = max(|A| 3 , \B\ 2 ). 

Let M be a positive integer, and let Ch{M) be the set of elliptic curves 
E with H(E) < M 6 . For any prime p denote by £ P (M) the set of elliptic 
curves E G Ch(M) such that p is an excepcional prime for E, and by £(M) 
the union of £ P (M) for all primes. Actually in both sets the elliptic curves 
were considered up to Q-isomorphisms. Duke then proved that 

lim ,' \ ' ' = 0. 

M^oo \C H {M)\ 

His proof is based on a version of the Chebotarev density theorem, and uses 
a two-dimensional large sieve inequality together with results of Deuring, 
Hurwitz and Masser-Wiistholz. 

Duke also conjectured the following fact, later proved by Grant [10] 



\£{M)\ ~ cVM. 

Being a bit more precise, Grant showed that, in order to efficiently estimate 
|£(M)|, only £2(M) and £%(M) had to be actually taken into account. 

Now recall that there is a tight relationship between exceptional primes 
and torsion orders, because if there is a point of order p, then p is an 
exceptional prime [2U] . Our aim is then giving a down-to-earth proof of the 
fact that almost all elliptic curves over Q have trivial torsion, motivated by 
Duke's paper. 

We will use in order to achieve this the characterization of torsion struc- 
tures given in [3 [8] , Mazur's Theorem [161 E] ] an d a theorem by Schmidt 
[19] on Thue inequalites. Note that we have used a different height notion, 
more naive in some sense, but nevertheless better suited for our purposes. 

Let us change a bit the notation and let us call 

E (a ,b) ■ Y 2 =X 3 + AX + B 
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and, provided A ^ 0, we will denote by Eu,B)(Q)[ m ] the group of points 
P G E(a,b)(Q) such that [m]P = O. Let us write as well 

C(M) = {(A,B) G Z 2 | A = -1Q(AA 3 + 27B 2 ) ^ 0, \A\, \B\ < M}. 
T P (M) = {(A,B) G C(M) | E {A>B) (Q)\p] / {O}}. 

T{M) = |J T P (M) 

p prime 

Our version of Duke's result is then as follows. 



Theorem 1. With the notations above, 



T(M) 
lim ' .\ / = 0. 

M^oo \C(M)\ 



The proof will lead to extremely coarse bounds for \T P {M)\ which will be 
proved unsatisfactory in view of experimental data, which we will display 
subsequently. 

2. Proof of Theorem [TJ 

Recall that the possible prime orders of a torsion point defined over Q 
are 2, 3, 5 or 7. 

We will make extensive use of the parametrizations of curves with a point 
of prescribed order given in 0, [8], [Hj. These results have recently been 
proved useful in showing new properties of the torsion subgroup (see, for 
instance [HE1CE3]). 

First, note that, for a given A with \A\ < M there are, at most, two 
possible choices for B such that A = (and hence, the corresponding curve 
E(a,b) is not an elliptic curve). Therefore 

\C{M)\ > (2M + l) 2 - 2(2M + 1) = 4M 2 - 1. 

Let us recall from [TJ that a curve E^b) with a point of order 2 must 
verify that there exist zi,Z2 £ 2 such that 

A = z\ — z%, B = z\Zi- 

Therefore z±\B and for a chosen z±, both Z2 and A are determined. Hence, 
there is at most one pair in T2 (M) for every divisor of B. 

We need now an estimate for the average order of the function d(x), the 
number of positive divisors of x. The simplest estimation is, probably, the 
one that can be found in 

d{\) + d{2) + ... + d(x) ~ x\og(x). 

Therefore, as M tends to infinity, 

M M 

\T 2 (M)\<Y, 2d(x) + 2d ( x ) + 2M > 

x=l x=l 
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taking into account that we need to consider both positive and negative 
divisors, the cases where x G {— M, —1} and the 2M curves with B = 0. 
Hence |72(M)| ~ C2Mlog(M), where we can, in fact, take c 2 = 4. 

As for points of order 3 we can find in [7] a similar characterization (a bit 
more complicated this time) based on the existence of Z\ , z-i G Z such that 

A = 27z 4 + 6ziz 2 , B = 4~ 274- 

Analogously Zi\A and, once we fix such a divisor, z 2 is necessarily given by 

A - 27 z 4 

%2 — ~ , 

which implies that again there is at most one pair in Tz{M) for every divisor 
of A. Hence, as M tends to infinity 

\%(M)\ <c 3 Mlog(M), 

and again c 3 = 4 suits us. 

Points of order 5 and 7 need a similar, yet slightly different argument. 
From [5] we know that if there is a point of order 5 in E^,b){Q), then there 
must exist p, q G Z verifying: 

A = -27 \q A - I2q 3 p + Uq 2 p 2 + 12p 3 q + p 4 ) , 

B = 54(p 2 + g 2 )(g 4 -18g 3 p + 74gV + 18p 3 g + p 4 ). 

The first equation is an irreducible Thue equation, hence we can apply 
the following result by Schmidt: 

Theorem (Schmidt [19J).— Let F(x,y) be an irreducible binary form of 
degree r > 3, with integral coefficients. Suppose that not more than s + 1 
coefficients are nonzero. Then the number of solutions of the inequality 

\F(x,y)\ < h is, a most, 

(rsf /2 h 2 ' r (l + log 1/r (/i)) . 

As for our interests are concerned, this gives a bound for the number of 
possible (p, q) such that 

| -27(g 4 - 12g 3 p + Uq 2 p 2 + 12p 3 q + p 4 ) \ < M. 

Hence, as every such solution determines at most one pair in %(M), 

\%{M)\ < AVM (l + log 1/4 (M)) . 

A similar result can be applied for points of order 7. The equations which 
must have a solution are now 

A = -27k 4 (p 2 -pq + q 2 )(q 6 + 5q 5 p- 10q 4 p 2 - 15g 3 p 3 + 

30q 2 p 4 -llqp 5 +p 6 ), 
B = 54k 6 (p 12 - 18p u q + 117p 10 q 2 - 354p 9 g 3 + 570pV - 486p 7 g 5 

+273/g 6 - 222pV + 174p 4 g 8 - 46p 3 q 9 - 15p 2 q 10 + 6pq n + q 12 ). 
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either for k = 1 or for k = 1/3. Hence, using the polynomial defining B 
and with a similar argument as above 

\T 7 (M)\ < 2A<fM (l + log 1/12 (M)) . 

Therefore, for all p there is an absolut constant c p G Z + such that 

, im mm < lim = „. 

M^oo |C(M)| - M^oo 4M 2 - 1 

This proves the theorem. 

Remark.— It must be noted here that our arguments are counting pairs 
(A, B). So, in fact, isomorphic curves may appear as separated cases. Both 
Duke and Grant estimated isomorphism classes (over Q) rather than curves. 

But this can also be achieved by the arguments above with a little extra 
work. We will show now that these instances of isomorphic curves are 
actually negligible as for counting is concerned. 

First note that if two curves E^a,b) and E(a',b>) are isomorphic over Q, 
there must be some u G Q such that A = u A A' and B = u 6 B'. Hence, there 
exists some prime I such that, say, l 4 \A and 1 & \B (the case l 4 \A' and l 6 \B' 
is analogous). Let us write, for a fixed prime / 

P n (M, I) = {x G Z + | 1 < x < M, l n \M} , 

and by P n (M) the union of P n (M, I), where I run the set of prime divisors 
of M. 

Then it is clear that 

\P n (M n )\<J2\Pn(M n ,l)\ = J2 

1<M 1<M 

= M n Ei< M {w)+°( M ) = Mn E ^ + 0(M) = M n P(n)+0(M), 

l prime 

where V is the prime zeta function (see [S], for instance). So, changing M n 
for M we get 

|P 4 (M)| < P(4)M + O (Vm\ ~ 0.0769931M + O (v 7 ^) , 
\Pe(M)\ < P(Q)M + (v 7 !/) ~ 0.0170701M + O [^M^j . 



1^ 71 /T \ / 



Hence, if we are interested in curves up to Q-isomorphism, our bounds 
for |7^(M)| are still correct, while we should change 

\C{M)\ > AM 2 - 1 

by 

\C(M)\ > (4 - P(4)P(6)) M 2 + O {fM^ 
which obviously makes no difference in the result. 
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Remark 1. While all of our boundings for |7^(M)| are of the form c p M\og(M), 
computational data show that the actual number of curves on T P (M) de- 
pends heavily on p, as one might predict after the estimation given by Grant 
[TP] for £ p (M), the set of elliptic curves E G Ch{M) such that p is an excep- 
tional prime for E. In fact, a hands-on Magma program gave us the following 
output 



M 


\%(M)\ 


\%{M)\ 


\%(M)\ 


\%{M)\ 


10 4 


204, 220 


507 


1 


1 


10 5 


2,484,196 


1,935 


3 


1 


10 6 


29,430,050 


5,873 


11 


4 


10 7 


340, 334, 782 


18,387 


24 


5 



These actual figures are quite smaller than the bounds obtained. 
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